Austin ISSA

I enjoy having the opportunity to support our local security community and so I am very happy to have the opportunity to present to the Austin ISSA on January 19 (Thursday) - 11:30am to 1pm.

In this presentation I will explain a little about IT security assurance, describing a basic concepts about what security assurance is, and what it is not. I will also explain the framework used in the IT security industry that attempts to make sense of all of those disparate security claims (from ISO/IEC 27001, FISMA compliance, FIPS 140-2, Common Criteria, personnel certifications, PCI compliance, etc, etc).

This presentation is derived from the work currently being performed in ISO's JTC1 SC27 (IT security techniques subcommittee) in revising ISO/IEC 15443, a Framework for IT Security Assurance (FRITSA).

- Fiona Pattinson